IntelOwl: manage your Threat Intelligence at scale
-
Updated
Sep 5, 2024 - Python
IntelOwl: manage your Threat Intelligence at scale
Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.
Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.
Actionable analytics designed to combat threats
A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
Tenzir is the data pipeline engine for security teams.
MDATP
Awesome list of keywords and artifacts for Threat Hunting sessions
A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Industry. [PRE-ALPHA]
Detecting ATT&CK techniques & tactics for Linux
Artifact collection tool for *nix systems
Purpleteam scripts simulation & Detection - trigger events for SOC detections
KQL Queries. Microsoft Defender, Microsoft Sentinel
An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.
Enhance your malware detection with WAF + YARA (WAFARAY)
The FASTEST way to consume threat intel.
Collection of Dashboards for Threat Hunting and more!
Sysmon config for both Windows and Linux Devices. Windows one is a bit dated
Sigma detection rules for hunting with the threathunting-keywords project
Add a description, image, and links to the threathunting topic page so that developers can more easily learn about it.
To associate your repository with the threathunting topic, visit your repo's landing page and select "manage topics."